# How sandbox routing works

## How sandbox routing works
- The cases below apply to **every bureau setup** — Equifax-only hosts, Equifax 3B hosts, and hosts enrolled with multiple bureaus (Equifax, TransUnion, Experian). The flow, endpoints and webhooks are the same; only the mocked end-to-end rows differ per setup.
- All demo SSNs **start with `666`** — that's how the platform flags a request as a demo user (`user.isDemo() = true`).
- Format SSNs as 9 digits without dashes (e.g. `666106116`) and mobiles as 10 digits without dashes (e.g. `5555551222`).
- The sandbox **does not send real SMS**. The SMFA link is returned directly in the `/users/smfa-send-link` response and shown in the response.
- Use a **unique number in `street2`** for each test run — the platform caches by an identity-data hash and reusing the same data may hit a previous run's cache.



---

Version: v3

## Description:

  - `How sandbox routing works` ()
    The cases below apply to every bureau setup — Equifax-only hosts, Equifax 3B hosts, and hosts enrolled with multiple bureaus (Equifax, TransUnion, Experian). The flow, endpoints and webhooks are the same; only the mocked end-to-end rows differ per setup.All demo SSNs start with 666 — that's how the platform flags a request as a demo user (user.isDemo() = true).Format SSNs as 9 digits without dashes (e.g. 666106116) and mobiles as 10 digits without dashes (e.g. 5555551222).The sandbox does not send real SMS. The SMFA link is returned directly in the /users/smfa-send-link response and shown in the response.Use a unique number in street2 for each test run — the platform caches by an identity-data hash and reusing the same data may hit a previous run's cache.